Cybersecurity Compliance & CMMC Support

The contract requires comprehensive support to achieve and maintain compliance with NIST SP 800-171 standards and to prepare for CMMC Level 2 self-assessment, focusing on implementing and verifying the necessary cybersecurity safeguards across all relevant systems. This includes ensuring that technical, administrative, and physical controls are properly documented, configured, and operational to meet the required security objectives outlined in the NIST framework, with particular attention to protecting controlled unclassified information. The contractor must also establish and maintain robust cyber incident reporting procedures in alignment with DFARS clauses, ensuring timely detection, response, and reporting of security events to the appropriate authorities. The work is scoped under a subcontract tied to the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance expected to occur in New Cumberland, Pennsylvania, at zip code 17070-5002. The opportunity was posted on July 21, 2026, with a strict deadline for responses set for July 24, 2026, indicating a rapid turnaround requirement. The NAICS code 541512 classifies this as computer systems design and related services, underscoring the technical nature of the effort. The contractor must be prepared to align fully with federal cybersecurity mandates, demonstrate clear readiness for CMMC Level 2 evaluation, and support ongoing compliance activities through continuous monitoring, risk management, and documentation rigor.